ISO 27001 Lead Auditor (Internal Audit)

Intelance is a UK advisory and assurance firm working across enterprise architecture, cyber assurance, AI governance and data governance. We run information security management systems (ISMS) for clients certified to ISO/IEC 27001:2022, and we are appointing a qualified ISO 27001 Lead Auditor as an associate contractor to carry out independent internal audits.

Your first assignment is a remote internal audit of an ISO 27001 certified technology company with offices in the UK and Asia. The audit is planned for early February 2027 and needs about 3 to 5 days, including planning, interviews, evidence review and the report. Further internal audit assignments will follow as our managed ISMS service grows.

This is an associate panel role. Each assignment is agreed separately with a written scope, timetable and day rate.

Tasks

• Plan and carry out independent internal audits against ISO/IEC 27001:2022 clauses 4 to 10 and the Annex A controls.

• Build a risk based audit plan and checklist from the client's scope, Statement of Applicability and previous audit findings.

• Interview control owners and review evidence in the client's compliance platform (for example Vanta) and document tools (for example Notion).

• Check that earlier non-conformities have been closed properly and the fixes work.

• Raise clear findings graded as major non-conformity, minor non-conformity or opportunity for improvement.

• Write a short, plain English audit report that the client's leadership can act on before management review.

• Present findings at a closing meeting with the client and Intelance.

• Stay fully independent of the team that runs the client's ISMS day to day.

• Follow Intelance quality, security, confidentiality and conflict of interest procedures.

Requirements

Essential

• A current ISO/IEC 27001 Lead Auditor certificate (PECB, CQI and IRCA, BSI or equivalent).

• Hands on experience auditing against ISO/IEC 27001:2022, including the updated Annex A controls.

• At least three ISO 27001 internal or certification audits led in the last three years.

• Experience auditing cloud based and SaaS businesses.

• Able to write concise, evidence based findings that non technical leaders understand.

• Based in the UK and able to work as a self-employed contractor.

• Willing to declare any certification body work so we can confirm you are independent before each assignment.

Desirable

• Experience auditing organisations that use Vanta, Drata or a similar compliance platform.

• Experience auditing companies with offices in more than one country.

• Knowledge of UK GDPR and how it links to ISO 27001.

• ISO/IEC 27001 Lead Implementer certificate.

Benefits

• Join Intelance's specialist cyber assurance associate panel.

• Clearly scoped, remote assignments with a written scope, timetable and agreed day rate.

• Regular internal audit work as our managed ISMS client base grows.

• Work alongside an experienced assurance team with structured templates and quality review.

• Flexible, project based work you can fit around other commitments.

Apply with your CV. Shortlisted candidates will be asked for certificate evidence and references. Anonymised audit summaries are enough at application stage. Please do not send confidential client material.